Privacy Policy

1. Introduction

Bhadraa Global Enterprises (“we”, “our”, or “us”) operates the Bhadraa Billing Tool, a multi-tenant billing and customer management platform (“the Service”) available at this domain. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

By registering for or using the Service, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

Business Information

• Business name, address, city, state, pincode
• Business type / category
• GST number (optional)
• Business logo (uploaded by you)

Account Owner / Admin Information

• Full name and date of birth
• Email address and phone / WhatsApp number
• PAN number (for identity verification)

Financial Information

• Bank account number and IFSC code (stored encrypted)
• UPI ID
• Subscription payment records (order reference and payment reference only — card or netbanking details are never stored by us)

Usage & Technical Information

• Login timestamps and IP addresses
• Session identifiers (stored in secure, HTTP-only cookies)
• Device and browser information for security purposes

3. How We Use Your Information

• To create and manage your billing tool account and workspace
• To process your subscription payments through our payment processor
• To send transactional communications — including password setup links, invoices, and account notifications — to your registered email address
• To store and serve your business logo securely via our file storage infrastructure
• To enforce rate limiting, detect fraud, and protect the security of all accounts on our platform
• To analyse usage patterns and platform performance for the purpose of improving and developing the Service (analytical use)
• To communicate with you about new features, updates, or offerings from Bhadraa Global Enterprises that may be relevant to your business (marketing use). You may opt out of marketing communications at any time by contacting us at info@bhadraa.in
• To comply with applicable legal and regulatory obligations

4. Data Storage & Security

• Your data is stored in an isolated, dedicated database schema — completely separate from other businesses on the platform (multi-tenant architecture)
• All data is hosted on secure, industry-standard cloud infrastructure
• Passwords are stored securely in hashed form and are never stored in plain text; a one-time secure link is sent to your registered email only for initial account setup and password resets
• Financial data (bank account, IFSC) is encrypted at rest
• All data in transit is encrypted using TLS (HTTPS)
• Access to production data is strictly limited to authorised personnel

5. Third-Party Service Providers

We engage trusted third-party service providers solely to operate the Service. These providers process your data only on our behalf and are bound by strict data processing terms. We do not disclose the specific names of our infrastructure providers in this policy, as they may change over time. The categories of providers we use include:

• Payment processor — to handle subscription fee transactions securely. Card or netbanking details go directly to the processor and are never seen or stored by us.
• Email delivery service — to send transactional emails on our behalf
• Cloud file storage — to store and serve your uploaded business logo
• Database hosting — to store your account and billing data in isolated, secure infrastructure

6. Data Sharing

We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data is shared only with the service providers described in Section 5, and only to the extent necessary to deliver the Service. We may disclose information if required to do so by law, court order, or a valid government authority.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India) and applicable data protection laws, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your account and associated personal data
• Right to data portability — request your data in a structured, machine-readable format
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at info@bhadraa.in. We will respond within 30 days.

8. Data Retention

• Active account data is retained for the full duration of your subscription
• Upon cancellation or account closure, personal data is retained for 90 days and then permanently deleted, unless a longer period is required by law
• Payment and transaction records are retained for 7 years in compliance with Indian tax and financial regulations

9. Cookies

We use session cookies strictly for authentication purposes — to keep you securely signed in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You may disable cookies in your browser settings, but doing so will prevent you from using the Service.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify all registered users via email to their registered address at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy. The current version will always be available at this page.

11. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data: